CVE-2009-3479

2022-10-0316:23:56

mitre

www.cve.org

cross-site scripting

bibliography module

drupal

cve-2009-3479

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with “create content displayed by the Bibliography module” permissions, to inject arbitrary web script or HTML via a title.

References

drupal.org/node/534744

drupal.org/node/534752

drupal.org/node/534842

secunia.com/advisories/36083

www.securityfocus.com/bid/35865